$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/441364f7-b81f-3438-8e4e-5021ad9b611e.roa File: 441364f7-b81f-3438-8e4e-5021ad9b611e.roa (raw, json) Hash identifier: CQ0aSAgZU+hbwUHUsfF+W0Nj6kVatT2nQx3SPnb0Kd8= Subject key identifier: 92:40:60:7A:0C:41:FC:15:F3:14:70:BA:19:63:18:72:8B:3A:A4:16 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584742BB441F25947E991748B8D0 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/441364f7-b81f-3438-8e4e-5021ad9b611e.roa Signing time: Thu 19 Sep 2024 01:00:31 +0000 ROA not before: Thu 19 Sep 2024 01:00:31 +0000 ROA not after: Wed 18 Dec 2024 02:00:31 +0000 asID: 399629 IP address blocks: 192.153.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:42:bb:44:1f:25:94:7e:99:17:48:b8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Sep 19 01:00:31 2024 GMT Not After : Dec 18 02:00:31 2024 GMT Subject: CN=ab6da970-1f58-493a-9cc2-af1e40cd782a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:83:5c:d8:64:b5:3b:93:a8:99:f3:9f:d9:a5: b9:c4:bc:35:09:22:31:9a:eb:9e:2c:40:ba:f8:04: 2d:93:63:58:11:96:37:61:4a:9e:22:aa:af:76:a4: 73:47:0d:92:73:5c:e9:14:82:cf:d5:ef:57:d4:e9: 24:33:7c:61:46:34:78:75:b8:9d:af:d2:92:e9:9b: 68:1b:72:69:ca:c2:bc:e5:6a:3e:83:ff:01:b2:74: a5:fa:c0:0b:44:f0:30:a3:3a:ea:ad:25:69:4b:68: 3b:1a:48:b9:8d:b8:4b:e4:9d:29:05:80:c1:f6:2b: 4b:62:bc:8d:a3:bb:eb:9f:a6:88:ca:0d:a5:36:eb: 58:66:48:14:8e:31:12:3f:ed:13:20:60:12:21:be: 81:4a:27:a3:02:02:37:21:99:1a:b8:2d:c6:c3:40: 6c:59:a5:91:6a:3b:d3:b5:ac:f2:e1:ff:40:90:10: 9f:38:83:9e:7c:3e:d5:ed:26:a8:ba:38:98:d8:81: f9:98:94:37:d1:a6:91:7a:8c:f3:4a:31:f3:ac:4c: ba:22:3e:5c:44:a1:4b:0f:4c:28:8a:5d:f2:27:0f: 4a:7e:b7:ff:f0:2f:01:e6:e9:46:0d:18:6b:74:d4: d1:9a:d9:92:46:d7:0e:e7:3f:9c:10:a3:8a:80:6c: 4c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:40:60:7A:0C:41:FC:15:F3:14:70:BA:19:63:18:72:8B:3A:A4:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/441364f7-b81f-3438-8e4e-5021ad9b611e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 192.153.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:6d:c7:d0:86:1d:92:c5:5c:8a:41:f0:01:cb:f2:04:8f:fb: 31:4c:a1:f7:df:ba:80:a1:ef:2a:f6:6e:7c:15:35:b9:63:db: bd:12:57:ae:0b:d5:83:70:4c:b5:bb:6f:03:88:eb:b7:b0:e0: a9:09:c5:d4:c8:41:33:aa:f1:e7:a1:81:31:74:66:6d:84:65: ac:a5:15:4c:b5:90:99:db:90:60:05:2a:38:57:40:a1:50:ae: e9:00:4f:ed:b5:0b:fd:24:59:f5:50:ba:6f:1e:43:65:fd:30: 0a:df:9b:52:80:dc:cc:82:59:5a:87:f4:87:a9:6b:15:b7:2b: 59:54:2a:10:bc:e6:e5:6f:6a:f5:8c:a9:2e:56:61:c6:81:db: 6a:ea:da:98:3e:da:8a:8f:45:34:b9:8b:b3:35:48:aa:fd:27: 20:e8:ca:9b:58:1d:d5:89:6c:56:c2:e6:41:ed:7f:96:1b:27: 1b:af:9c:b1:30:3f:a8:54:30:a1:89:df:af:cc:46:89:aa:ed: 35:41:ba:cb:27:4e:7d:95:d9:7d:db:37:6d:d9:3d:f6:61:23: 84:94:1f:93:aa:5d:50:d2:f9:3f:4a:9e:7a:1d:e0:38:90:42: 20:db:c7:73:a4:6e:12:ee:5d:67:72:56:03:40:cf:f1:b5:b6: a5:5a:68:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdCu0QfJZR+mRdIuNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI0MDkxOTAxMDAzMVoXDTI0MTIxODAyMDAzMVowLzEtMCsGA1UEAxMk YWI2ZGE5NzAtMWY1OC00OTNhLTljYzItYWYxZTQwY2Q3ODJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnINc2GS1O5OomfOf2aW5xLw1CSIxmuueLEC6 +AQtk2NYEZY3YUqeIqqvdqRzRw2Sc1zpFILP1e9X1OkkM3xhRjR4dbidr9KS6Zto G3JpysK85Wo+g/8BsnSl+sALRPAwozrqrSVpS2g7Gki5jbhL5J0pBYDB9itLYryN o7vrn6aIyg2lNutYZkgUjjESP+0TIGASIb6BSiejAgI3IZkauC3Gw0BsWaWRajvT tazy4f9AkBCfOIOefD7V7SaoujiY2IH5mJQ30aaReozzSjHzrEy6Ij5cRKFLD0wo il3yJw9Kfrf/8C8B5ulGDRhrdNTRmtmSRtcO5z+cEKOKgGxM3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJAYHoMQfwV8xRwuhljGHKLOqQWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvNDQxMzY0ZjctYjgxZi0z NDM4LThlNGUtNTAyMWFkOWI2MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJk5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1tx9CGHZLFXIpB8AHL8gSP+zFMofffuoCh7yr2bnwVNblj270SV64L 1YNwTLW7bwOI67ew4KkJxdTIQTOq8eehgTF0Zm2EZaylFUy1kJnbkGAFKjhXQKFQ rukAT+21C/0kWfVQum8eQ2X9MArfm1KA3MyCWVqH9IepaxW3K1lUKhC85uVvavWM qS5WYcaB22rq2pg+2oqPRTS5i7M1SKr9JyDoyptYHdWJbFbC5kHtf5YbJxuvnLEw P6hUMKGJ36/MRomq7TVBussnTn2V2X3bN23ZPfZhI4SUH5OqXVDS+T9Knnod4DiQ QiDbx3OkbhLuXWdyVgNAz/G1tqVaaAc= -----END CERTIFICATE-----Generated at Sun Nov 24 21:48:24 2024 by rpki-client on console-ams.rpki-client.org